Loic A.

General engineer specialized in Information Security Management System (ISMS) with over 5 years of experience in highly regulated environments. I possess expertise in implementing and improving Information Security Management Systems (ISMS) compliant with the ISO 27000 series standards, as well as in cyber risk analysis and management using methodologies such as EBIOS Risk Manager.

My engineering background has enabled me to develop a systemic approach to organizations and digital systems, at the interface of technological, regulatory, and governance challenges, integrating the requirements of normative and regulatory frameworks such as ISO 27001/27005, NIS2, the Digital Operational Resilience Act (DORA), the Cyber Resilience Act (CRA), the General Data Protection Regulation (GDPR), and the European regulation on artificial intelligence (AI Act).

I have contributed to regulatory compliance projects, cybersecurity governance, and risk management, including the implementation of security controls, audit preparation, compliance management, and the integration of cybersecurity requirements into information systems and processes.

Accustomed to operating in complex and international environments, I am comfortable coordinating multidisciplinary teams, conducting risk analyses, and managing compliance initiatives, as well as using GRC platforms such as ServiceNow for tracking controls, risks, and remediation plans. I am proficient in writing technical and governance documentation in both English and French.